Privacy Policy
Core Privacy Commitment
At Kuro Solutions, we build high-performance web systems and automation architectures. We hold client confidentiality and data sovereignty as fundamental engineering principles. We do not sell, monetize, or broker your personal information. We collect only what is strictly necessary to evaluate project scopes, deliver custom software solutions, and maintain system security.
Data Controller & Scope
This Privacy Policy describes how Kuro Solutions (“Kuro”, “we”, “us”, or “our”) processes personal data when you visit our website (thekurosolutions.com), submit project inquiries, interact with our digital media, or engage our engineering, design, and cybersecurity services.
If you have any questions regarding how your data is handled or wish to exercise your legal data rights, our primary data protection contact is available at hello@thekurosolutions.com.
Information We Collect
We collect personal information in two primary ways: information you directly provide to us, and technical telemetry generated automatically when navigating our platform.
A. Information You Voluntarily Provide
When you submit an inquiry through our contact form, book a consultation, or communicate with our engineering studio, we collect:
- Contact Details: Your full name, email address, company name, and phone number (if provided).
- Project Specifications: Selected engineering services (Web & SaaS Engineering, AI Workflows, Brand Systems, Web Pentesting), estimated budgets, delivery timelines, and project descriptions.
- Client Communication: Any follow-up correspondence, architectural requirements, or specifications exchanged during discovery calls and project scoping.
B. Technical & Operational Telemetry
To ensure platform resilience, prevent denial-of-service attacks, and optimize core web vitals, our servers automatically register:
- Network Metadata: IP address (utilized transiently for abuse prevention, contact form rate-limiting, and approximate geographic routing).
- Device & Browser Environment: User-agent strings, browser type, operating system version, and viewport dimensions to ensure proper responsive layout rendering.
- Aggregated Usage Analytics: Anonymized navigation metrics, page response latency, and performance data recorded via Vercel Speed Insights and Vercel Analytics without personal identification cookies.
How We Use Your Information
We process your data strictly under valid legal bases—including legitimate business interests, contractual necessity, and legal compliance:
- Service Delivery & Client Engagement: To evaluate technical feasibility, formulate engineering proposals, execute client agreements, and provide ongoing development support.
- Infrastructure Security: To enforce API rate limits (e.g. 5 submissions per 10 minutes on contact endpoints), detect automated bot submissions via honeypot protocols, and prevent malicious exploitation.
- Performance Optimization: To monitor Core Web Vitals, optimize asset delivery, and maintain sub-second page rendering across global edge nodes.
- Commercial Communication: To respond directly to your inquiries. We do not enroll clients into unsolicited marketing newsletters without affirmative consent.
Codebase Confidentiality & IP Protection
As an engineering studio specializing in proprietary web applications, SaaS products, and custom AI agents, we enforce rigorous confidentiality safeguards:
- Strict Non-Disclosure: All client source code, architectural schemas, API keys, database credentials, and business logic shared during consultations or engagements are treated under strict confidentiality agreements (NDAs).
- Zero AI Model Training on Client IP: We never submit client proprietary code, private business records, or project IP to public LLM training corpuses or external open-source repositories.
- Hardened Development Environments: All engineering workspaces leverage multi-factor authentication, secret management with zero hardcoded credentials, and encrypted local storage.
Third-Party Infrastructure & Processors
We partner only with security-audited infrastructure providers who maintain SOC 2, ISO 27001, and GDPR compliance:
- Vercel Inc.: Cloud hosting platform and edge compute provider. Vercel processes request routing, serverless executions, and real-time performance telemetry.
- Web3Forms: Encrypted email relay service used strictly to dispatch form inquiries securely from our serverless contact endpoint to our internal mailbox.
- Legal Compulsion: We may disclose information if required by applicable law, court subpoena, or governmental regulatory authority, provided we provide prompt notice where legally permissible.
Data Retention & Security
We retain project inquiry records only for as long as necessary to fulfill the operational purposes described in this policy, maintain client service history, or satisfy statutory tax and legal requirements.
All communication channels and web traffic are protected by TLS 1.3 encryption in transit. Our production systems adhere to OWASP Top 10 security guidelines, automated input sanitization, and continuous vulnerability scans.
Your Legal Rights
Depending on your geographical jurisdiction (including the European Union under GDPR, the United Kingdom under UK GDPR, and California under CCPA/CPRA), you possess specific rights concerning your personal data:
- Right to Access: Request a copy of the personal information Kuro Solutions retains about you.
- Right to Rectification: Request correction of inaccurate or incomplete project and contact records.
- Right to Erasure (“Right to be Forgotten”): Request the permanent deletion of your inquiry data from our active mailboxes and databases.
- Right to Restriction & Objection: Object to or request the limitation of our processing of your personal information.
To exercise any of these rights, email us at hello@thekurosolutions.com. We acknowledge and process verified requests within 30 business days at no charge.
Changes to This Policy
We may periodically update this Privacy Policy to reflect advancements in our engineering architecture, regulatory evolutions, or operational procedures. Any modifications will be posted to this page with an updated “Last Updated” timestamp. Continued use of our platform after revisions constitutes acknowledgment of the updated terms.
Contact Our Privacy & Engineering Team
If you have inquiries about our confidentiality standards, security protocols, or privacy practices, reach out directly to our leadership and engineering team.